CVE-2009-2237

The CVE-2009-2237 entry concerns the Drupal Views Bulk Operations module (Drupal: VBO) with vulnerable versions: 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7. The vulnerability allows remote attackers to bypass intended access restrictions and modify created content ("nodes or classes of nod...

CVE-2009-2237

Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures aka actio...

net-snmp security update

5.0.9-2.30E.28 - fix another crash in bulk request processing 469369...

PT-2009-1070 · Net Snmp · Net-Snmp-Devel +3

Name of the Vulnerable Software and Affected Versions: net-snmp versions 5.0.9 net-snmp-devel versions 5.0.9 net-snmp-utils versions 5.0.9 net-snmp-libs versions 5.0.9 Description: The issue allows remote attackers to cause a denial of service, potentially leading to a disruption of...

SA-CONTRIB-2009-029 - Views Bulk Operations - Access Bypass

Views Bulk operations allows registered procedures called actions to be applied on a result set of Drupal nodes, returned by the Views module. Through the Views Bulk Operations interface, it is possible to let users who are not authorized to update specific nodes or classes of nodes, to still app...

CVE-2009-0575

Cross-site scripting XSS vulnerability in the themeviewsbulkoperationsconfirmation function in viewsbulkoperations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the themeviewsbulkoperationsconfirmation function in viewsbulkoperations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-0575

Cross-site scripting XSS vulnerability in the themeviewsbulkoperationsconfirmation function in viewsbulkoperations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-0575

CVE-2009-0575 concerns Drupal’s Views Bulk Operations module, where the theme_views_bulk_operations_confirmation function in views_bulk_operations.module is vulnerable to cross-site scripting (XSS). Affected: Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4. Vector is unspecified b...

SA-CONTRIB-2009-005 - Views bulk operations - Cross site scripting

Views bulk operations augments Views by enabling bulk operations to be executed on the content displayed by a view. Views bulk operations does not properly escape user-supplied data on some pages, allowing malicious users to insert arbitrary HTML and script code into these pages. Such a cross sit...

net-snmp security update

5.3.1-24.2 - fix crash in bulk request processing 469373...

DEBIAN-CVE-2008-4309

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...

CVE-2008-4309

Integer overflow in the netsnmpcreatesubtreecache function in agent/snmpagent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attackers to cause a denial of service crash via a crafted SNMP GETBULK request, which triggers a heap-based buffer overflow,...

HiFriend - 'cgi-bin/hifriend.pl' Open Email Relay

source: https://www.securityfocus.com/bid/30320/info HiFriend is prone to an open-email-relay vulnerability. An attacker could exploit this issue by constructing a script that would send unsolicited bulk email to an unrestricted amount of email addresses with a forged email address. !/usr/bin/per...

Various invasion of the batch-a vulnerability warning-the black bar safety net

First:let others memory OVERforce him to restart @echo off start cmd %0 On this 3 lines. Second:let the other party to restart the specified number of timesvictim-specific @echo off if not exist c:\1.txt echo. c:\1.txt & goto err1 if not exist c:\2.txt echo. c:\2.txt & goto err1 if not exist...

net-snmp remote DoS via udp packet

The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value...

Bulk Move does not update the Security Level of subtasks

When doing a bulk move, Parent issues moved to a new project must take any subtasks with them. If the new project has a different Issue Security scheme, then issues should get the default issue security in the new project. Currently a bulk move will change the security setting of parent issues, b...

Bulk Move does not update the Security Level of subtasks

When doing a bulk move, Parent issues moved to a new project must take any subtasks with them. If the new project has a different Issue Security scheme, then issues should get the default issue security in the new project. Currently a bulk move will change the security setting of parent issues, b...

Bulk Move does not update the Security Level of subtasks

When doing a bulk move, Parent issues moved to a new project must take any subtasks with them. If the new project has a different Issue Security scheme, then issues should get the default issue security in the new project. Currently a bulk move will change the security setting of parent issues, b...

Moderate: Red Hat Security Advisory: php security update

Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A...